Threats tagged 'ghsa-m9m9-m43w-4v64'

A development regression in ThinkSystem v4 XClarity Controller 3 (XCC3) versions 2.51 IHX432Y through 2.56 IHX436K re-introduces the default OpenBMC root password after performing an XCC Reset to Default operation. This allows an attacker with administrative privileges to gain access to enabled administrative interfaces and the underlying XCC Operating System, which is normally inaccessible. These affected versions are no longer available for download, and process improvements have been implemented to prevent similar regressions.